Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/GXWpqeluVXhrQ1FX4ylENT4ybls.roa
File: GXWpqeluVXhrQ1FX4ylENT4ybls.roa (raw, json)
Hash identifier: 4f8MGObJtbVZToU9RBfxBl+OUpzPDgB4HsZrgY6RHMs=
Subject key identifier: 19:75:A9:A9:E9:6E:55:78:6B:43:51:57:E3:29:44:35:3E:32:6E:5B
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A10B68234261AA3D3C250D04693013FF32
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/GXWpqeluVXhrQ1FX4ylENT4ybls.roa
Signing time: Mon 05 Oct 2026 09:32:16 +0000
ROA not before: Mon 05 Oct 2026 09:32:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274889
IP address blocks: 89.42.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:68:23:42:61:aa:3d:3c:25:0d:04:69:30:13:ff:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Oct 5 09:32:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1975a9a9e96e55786b435157e32944353e326e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:5a:ec:db:cf:aa:34:93:c8:9e:97:15:eb:
78:05:19:05:56:b2:70:7b:c5:b4:a6:99:7d:c1:6f:
89:3e:98:69:4b:61:ad:67:1e:47:c3:ce:ad:d2:ad:
a8:9a:7c:45:be:c4:8f:4d:24:da:f1:a5:19:89:f7:
bc:45:8e:2d:83:ba:7e:17:7e:7b:36:17:50:94:fe:
38:f9:6c:dc:c4:b2:66:30:7e:85:15:70:33:26:91:
a3:14:49:3f:e4:86:66:cc:15:a6:13:67:27:67:2d:
3e:f4:1c:a1:00:29:aa:93:ed:9d:69:5b:a5:31:6f:
de:f8:30:f9:70:c4:dc:c9:98:b1:ba:32:c9:3f:62:
c6:4b:98:ae:8a:01:8b:67:d0:34:63:2f:79:db:08:
0f:be:24:36:24:fe:5e:b1:f2:91:99:27:4f:9a:24:
03:80:fb:52:0b:be:b7:3c:66:1c:d3:5f:c5:94:93:
63:34:89:ae:2b:fe:cb:6d:b1:92:e6:32:f1:43:58:
2f:03:a1:13:5b:27:7d:ac:38:36:43:66:db:c2:df:
2e:f6:77:6a:ab:d7:af:39:f7:19:33:13:b8:18:d7:
58:e1:57:a7:7e:f9:41:ca:a0:72:f0:56:26:1c:c5:
24:86:ae:d4:e8:23:0f:ed:92:cf:0a:e9:22:b0:1c:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:75:A9:A9:E9:6E:55:78:6B:43:51:57:E3:29:44:35:3E:32:6E:5B
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/GXWpqeluVXhrQ1FX4ylENT4ybls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e6:bd:0a:05:a8:e1:a2:0c:d2:5a:96:9c:5c:57:1a:26:16:
7b:f5:40:c5:60:5d:f8:72:b7:d5:d5:f1:04:02:c0:ac:0a:e7:
67:e8:ce:c8:69:33:d4:45:cd:2e:9e:2a:95:22:24:c8:19:b0:
67:f1:28:01:f7:75:b1:6c:34:8b:2b:b4:50:85:a2:e5:3c:92:
67:32:a8:fa:f1:26:0c:c8:05:bc:bf:0c:fd:58:06:03:d9:c3:
c5:6e:10:89:f2:36:fa:80:a7:8c:b5:9f:c2:50:f9:b4:e2:f5:
fd:fa:52:fc:48:f2:00:c5:5c:ee:8f:03:92:dd:c8:40:da:db:
40:7b:ca:b8:8e:25:4f:70:85:fc:64:26:f7:6e:b6:8a:7e:70:
26:ac:84:fe:95:89:18:52:a0:9b:57:62:c0:48:8d:94:51:40:
0c:8e:19:2f:af:58:a1:af:62:1f:7c:9d:83:07:91:bb:48:ce:
0e:b8:4d:ee:22:fe:ae:a2:81:9a:98:da:6d:44:31:b9:b1:db:
bb:f4:40:f5:c0:b1:a7:30:ba:51:d2:22:82:25:bb:c6:49:25:
91:8c:fc:7c:9a:00:36:e8:54:50:93:dd:c3:89:09:8c:87:65:
cb:ff:8b:7e:77:51:73:0e:19:67:43:de:ea:09:5e:25:aa:e2:
ee:60:9d:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaELaCNCYao9PCUNBGkwE/8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz
ZmE0YTIwHhcNMjYxMDA1MDkzMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTc1YTlhOWU5NmU1NTc4NmI0MzUxNTdlMzI5NDQzNTNlMzI2ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutpa7NvPqjSTyJ6XFet4BRkFVrJw
e8W0ppl9wW+JPphpS2GtZx5Hw86t0q2omnxFvsSPTSTa8aUZife8RY4tg7p+F357
NhdQlP44+WzcxLJmMH6FFXAzJpGjFEk/5IZmzBWmE2cnZy0+9ByhACmqk+2daVul
MW/e+DD5cMTcyZixujLJP2LGS5iuigGLZ9A0Yy952wgPviQ2JP5esfKRmSdPmiQD
gPtSC763PGYc01/FlJNjNImuK/7LbbGS5jLxQ1gvA6ETWyd9rDg2Q2bbwt8u9ndq
q9evOfcZMxO4GNdY4VenfvlByqBy8FYmHMUkhq7U6CMP7ZLPCukisBx/WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBl1qanpblV4a0NRV+MpRDU+Mm5bMB8GA1UdIwQY
MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt
NjNmMzAxODg5NDg2LzEvR1hXcHFlbHVWWGhyUTFGWDR5bEVOVDR5YmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2
LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSp4MA0G
CSqGSIb3DQEBCwUAA4IBAQCZ5r0KBajhogzSWpacXFcaJhZ79UDFYF34crfV1fEE
AsCsCudn6M7IaTPURc0uniqVIiTIGbBn8SgB93WxbDSLK7RQhaLlPJJnMqj68SYM
yAW8vwz9WAYD2cPFbhCJ8jb6gKeMtZ/CUPm04vX9+lL8SPIAxVzujwOS3chA2ttA
e8q4jiVPcIX8ZCb3braKfnAmrIT+lYkYUqCbV2LASI2UUUAMjhkvr1ihr2IffJ2D
B5G7SM4OuE3uIv6uooGamNptRDG5sdu79ED1wLGnMLpR0iKCJbvGSSWRjPx8mgA2
6FRQk93DiQmMh2XL/4t+d1FzDhlnQ97qCV4lquLuYJ2V
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:47:35 2026 by rpki-client